Drupal up to 6.37 drupal_set_header crlf injection

Summaryinfo

A vulnerability was found in Drupal up to 6.37. It has been classified as critical. Affected by this vulnerability is the function drupal_set_header. Performing a manipulation results in crlf injection. This vulnerability is cataloged as CVE-2016-3166. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability classified as critical has been found in Drupal up to 6.37 (Content Management System). This affects the function drupal_set_header. The manipulation with an unknown input leads to a crlf injection vulnerability. CWE is classifying the issue as CWE-93. The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

CRLF injection vulnerability in the drupal_set_header function in Drupal 6.x before 6.38, when used with PHP before 5.1.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks by leveraging a module that allows user-submitted data to appear in HTTP headers.

The weakness was shared 04/12/2016 (Website). The advisory is shared at openwall.com. This vulnerability is uniquely identified as CVE-2016-3166 since 03/14/2016. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details are known, but no exploit is available.

The commercial vulnerability scanner Qualys is able to test this issue with plugin 11580 (Drupal Core Multiple Security Vulnerabilities (SA-CORE-2016-001)).

Upgrading to version 6.38 eliminates this vulnerability.

The entries VDB-82265, VDB-82266, VDB-82267 and VDB-82268 are related to this item. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Content Management System

Name

• Drupal

Version

• 6.0
• 6.1
• 6.2
• 6.3
• 6.4
• 6.5
• 6.6
• 6.7
• 6.8
• 6.9
• 6.10
• 6.11
• 6.12
• 6.13
• 6.14
• 6.15
• 6.16
• 6.17
• 6.18
• 6.19
• 6.20
• 6.21
• 6.22
• 6.23
• 6.24
• 6.25
• 6.26
• 6.27
• 6.28
• 6.29
• 6.30
• 6.31
• 6.32
• 6.33
• 6.34
• 6.35
• 6.36
• 6.37

License

• open-source

Website

• Product: https://www.drupal.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion